Apple says it will start checking public iCloud links for harmful content in iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3.
Images in iCloud Photos and files in iCloud Drive shared using the "Anyone with the link" option will be "made accessible to Apple" for a content check. Apple doesn't define harmful content, but it could mean malware, malicious files, and/or child sexual abuse material (CSAM) given Apple's mention of law enforcement involvement.
If you try to upload harmful content, Apple reserves the right to move, refuse, modify, remove, or delete the content at any time. Apple may also take action against your Apple Account, including blocking or disabling your Apple Account, blocking the ability to create a new Apple Account with the associated email address or phone number, or if necessary, involving law enforcement.
iCloud files can be shared with "Send a Copy," which sends a file directly, or "Share a Link," which lets someone download it. Link sharing options are "People you choose" or "Anyone with the link," and it's only the latter option that will be evaluated by Apple.
Apple does not say whether links created before the 27.3 updates will be checked.
Apple says content made available to anyone is no longer end-to-end encrypted, even when Advanced Data Protection is on.
iOS 27.3, iPadOS 27.3, macOS 27.3, and visionOS 27.3 are currently available to developers for beta testing, and the software will see a public release in December.
